Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/bCrASk_y-x8zksJm4G_sczjHy1c.roa
File: bCrASk_y-x8zksJm4G_sczjHy1c.roa (raw, json)
Hash identifier: es/upCOVS5vKbCKtkMo5wm5dtGennqxVC9tRJP13Xiw=
Subject key identifier: 6C:2A:C0:4A:4F:F2:FB:1F:33:92:C2:66:E0:6F:EC:73:38:C7:CB:57
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01A06E3DD1E5E0D5CA3FFED73BE877616DEA
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/bCrASk_y-x8zksJm4G_sczjHy1c.roa
Signing time: Fri 04 Sep 2026 21:05:40 +0000
ROA not before: Fri 04 Sep 2026 21:05:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8069
IP address blocks: 145.190.0.0/23 maxlen: 23
145.190.2.0/24 maxlen: 24
145.190.3.0/24 maxlen: 24
145.190.4.0/23 maxlen: 23
145.190.6.0/24 maxlen: 24
145.190.7.0/24 maxlen: 24
145.190.8.0/21 maxlen: 21
145.190.16.0/21 maxlen: 21
145.190.24.0/21 maxlen: 21
145.190.32.0/22 maxlen: 22
145.190.36.0/24 maxlen: 24
145.190.37.0/24 maxlen: 24
145.190.38.0/23 maxlen: 23
145.190.40.0/23 maxlen: 23
145.190.42.0/24 maxlen: 24
145.190.43.0/24 maxlen: 24
145.190.44.0/22 maxlen: 22
145.190.48.0/22 maxlen: 22
145.190.52.0/23 maxlen: 23
145.190.54.0/24 maxlen: 24
145.190.55.0/24 maxlen: 24
145.190.56.0/23 maxlen: 23
145.190.58.0/24 maxlen: 24
145.190.59.0/24 maxlen: 24
145.190.60.0/24 maxlen: 24
145.190.61.0/24 maxlen: 24
145.190.62.0/24 maxlen: 24
145.190.63.0/24 maxlen: 24
145.190.64.0/24 maxlen: 24
145.190.65.0/24 maxlen: 24
145.190.66.0/24 maxlen: 24
145.190.67.0/24 maxlen: 24
145.190.68.0/24 maxlen: 24
145.190.69.0/24 maxlen: 24
145.190.77.0/24 maxlen: 24
145.190.78.0/24 maxlen: 24
145.190.81.0/24 maxlen: 24
145.190.128.0/24 maxlen: 24
145.190.129.0/24 maxlen: 24
145.190.130.0/24 maxlen: 24
145.190.131.0/24 maxlen: 24
145.190.132.0/24 maxlen: 24
145.190.133.0/24 maxlen: 24
145.190.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:3d:d1:e5:e0:d5:ca:3f:fe:d7:3b:e8:77:61:6d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 4 21:05:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2ac04a4ff2fb1f3392c266e06fec7338c7cb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:b0:34:62:17:f8:93:85:2f:80:d3:7b:2f:
4a:36:60:9d:4c:d9:1a:a7:0c:11:2f:2b:cd:51:e4:
2d:0c:a4:01:15:e7:fe:24:43:f5:5b:39:6a:17:19:
7e:21:bd:a3:68:c1:56:af:b4:d9:29:df:ac:49:83:
47:bb:e1:90:4b:32:c6:db:66:b1:9a:1e:01:a1:06:
8b:7d:43:17:f3:a7:0a:06:4d:5a:bf:36:20:74:1f:
60:a7:78:f9:2d:69:3e:99:2a:da:25:46:24:76:c5:
4c:72:ee:22:52:88:91:a0:38:cc:b8:28:28:c5:7f:
bf:c8:52:1c:48:f6:87:53:1c:3e:c8:52:71:84:e9:
e6:df:6f:fe:dd:7a:7f:8c:00:ab:9c:a3:82:79:b8:
b2:bc:3f:7f:f1:3a:87:35:7e:3f:74:51:7f:78:e0:
61:5f:77:56:01:97:5d:20:92:2d:bf:9e:57:60:29:
3a:e4:ab:ac:50:c8:01:b5:4c:4a:65:3e:75:b0:a5:
8a:43:3a:82:c0:ba:2d:35:6e:5a:92:2c:65:3d:4a:
7d:2b:02:25:6a:81:f1:75:3f:82:e2:3b:27:76:72:
a1:5e:e0:41:61:a0:5a:72:f0:19:60:e9:ba:43:5f:
a5:9b:a8:67:b1:a2:8b:09:d4:3a:ea:2a:f4:d6:9e:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2A:C0:4A:4F:F2:FB:1F:33:92:C2:66:E0:6F:EC:73:38:C7:CB:57
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/bCrASk_y-x8zksJm4G_sczjHy1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.190.0.0-145.190.69.255
145.190.77.0-145.190.78.255
145.190.81.0/24
145.190.128.0-145.190.134.255
Signature Algorithm: sha256WithRSAEncryption
bb:8f:58:cb:8a:1b:09:69:42:be:7e:94:a4:58:db:74:ab:5f:
3e:a3:ae:26:72:e8:37:e7:7a:33:a5:82:fb:de:c4:e2:9f:21:
14:be:67:5c:da:c2:a7:a2:07:56:c7:2d:99:34:90:cf:0b:fc:
eb:67:92:e5:ee:78:b3:59:67:0e:62:32:f3:12:1b:80:95:b4:
4b:45:e2:56:e1:d2:64:a4:c3:2e:02:66:6d:89:a9:30:9f:90:
01:bb:54:2a:80:15:87:42:eb:49:41:83:09:8a:c4:66:0f:fa:
39:69:50:f5:a5:b5:2a:36:b8:a3:ea:98:98:c0:5d:64:03:44:
3a:74:99:40:a8:cf:dd:93:05:0e:6a:31:e3:93:1a:a9:68:ef:
df:80:9a:c3:72:09:57:1d:6b:d1:f9:b6:e2:72:21:b1:e9:21:
ce:06:53:f4:a7:e5:17:ca:44:04:2b:ce:23:51:75:6c:f5:1a:
32:ca:45:48:07:c0:dc:8f:56:b4:55:a1:4b:39:c0:4b:1a:0e:
ab:6a:6b:64:c3:c8:ec:5f:fd:b5:d4:1f:5f:f2:bf:79:15:a1:
f8:49:a8:9b:bf:46:6a:ae:db:5f:c7:43:5d:bc:7e:54:f2:a2:
a0:2a:48:97:8e:f4:2e:55:6f:d9:1e:3e:b3:a5:5c:6d:ff:f7:
9f:99:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:09 2026 by rpki-client